Skip to content
OpenAdvisories
Medium WID-SEC-2023-0741 4 CVEs

IBM Business Automation Workflow: Mehrere Schwachstellen

Published Mar 23, 2023 · Updated Mar 23, 2023 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: Business Automation Workflow containers < 21.0.3-IF014 Product: Business Automation Workflow containers < 22.0.1-IF006 Product: Business Automation Workflow containers 22.0.2 Product: Business Automation Workflow traditional 19.0.0.3 Product: Business Automation Workflow traditional 20.0.0.1 Product: Business Automation Workflow traditional 20.0.0.2 Product: Business Automation Workflow traditional 21.0.2 Product: Business Automation Workflow traditional 21.0.3.1 Product: Business Automation Workflow traditional 22.0.1

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um einen Denial of Service Angriff durchzuführen und Sicherheitsmaßnahmen umgehen.

Product

IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Vulnerabilities 4

  • High 7.5
    CVE-2022-40153 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and…

  • High 7.5
    CVE-2022-43581

    IBM Content Navigator code execution

    IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code. IBM X-Force ID: 2388…

    IBM Content Navigator
  • Medium 6.5
    CVE-2022-40151

    Stack Buffer Overflow in xstream

    Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial o…

    x-stream xstream libxstream-java libxstream-java Debian Ubuntu Maven
  • Medium 6.5
    CVE-2022-40152 EPSS 18%

    Stack Buffer Overflow in Woodstox

    Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effec…

    x-stream Woodstox libxstream-java sonarqube-10 Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References